Lucene search

K
suseSuseOPENSUSE-SU-2021:1489-1
HistoryNov 19, 2021 - 12:00 a.m.

Security update for opera (important)

2021-11-1900:00:00
lists.opensuse.org
17

9.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

An update that fixes 16 vulnerabilities is now available.

Description:

This update for opera fixes the following issues:

Update to version 81.0.4196.31:

  • DNA-95733 Implement the ���Manage��� menu in card details view
  • DNA-95736 Update UI for paused card
  • DNA-95791 Crash at base::operator<
  • DNA-95794 Sometimes the sidebar UI fails to load
  • DNA-95812 Retrieve cards info when showing autofill
  • DNA-96035 Cannot create virtual card on Sandbox environment
  • DNA-96147 ���Buy��� button does not work
  • DNA-96168 Update contributors list
  • DNA-96211 Enable #fast-tab-tooltip on all streams
  • DNA-96231 Promote O81 to stable
  • Complete Opera 80.1 changelog at:
    https://blogs.opera.com/desktop/changelog-for-81/

Update to version 81.0.4196.27

  • CHR-8623 Update chromium on desktop-stable-95-4196 to 95.0.4638.54
  • DNA-92384 Better segmenting of hint users
  • DNA-95523 Allow sorting in multi-card view
  • DNA-95659 Flow of Lastcard on first login
  • DNA-95735 Implement the button that reveals full card details
  • DNA-95747 Better way to handle expired funding card
  • DNA-95949 [Mac Retina] Clicking active tab should scroll to the top
  • DNA-95993 Update icon used for Yat in address bar dropdown
  • DNA-96021 Cleared download item view is never deleted
  • DNA-96036 Occupation field in ‘Account ��� Edit’ is shown twice
  • DNA-96127 Upgrade plan button does nothing
  • DNA-96138 “Add Card” button does not change to “Upgrade Plan” after
    adding card
  • The update to chromium 95.0.4638.54 fixes following issues:
    CVE-2021-37981, CVE-2021-37982, CVE-2021-37983, CVE-2021-37984,
    CVE-2021-37985, CVE-2021-37986, CVE-2021-37987, CVE-2021-37988,
    CVE-2021-37989, CVE-2021-37990, CVE-2021-37991, CVE-2021-37992,
    CVE-2021-37993, CVE-2021-37994, CVE-2021-37995, CVE-2021-37996

Update to version 80.0.4170.72

  • DNA-95522 Change card view to show all types of cards
  • DNA-95523 Allow sorting in multi-card view
  • DNA-95524 Allow searching for cards by name
  • DNA-95658 Allow user to add a card
  • DNA-95659 Flow of Lastcard on first login
  • DNA-95660 Implement editing card details
  • DNA-95699 Add card details view
  • DNA-95733 Implement the ���Manage��� menu in card details view
  • DNA-95735 Implement the button that reveals full card details
  • DNA-95736 Update UI for paused card
  • DNA-95747 Better way to handle expired funding card
  • DNA-95794 Sometimes the sidebar UI fails to load
  • DNA-95812 Retrieve cards info when showing autofill
  • DNA-96036 Occupation field in ���Account ��� Edit��� is shown twice
  • DNA-96127 Upgrade plan button does nothing
  • DNA-96138 ���Add Card��� button does not change to ���Upgrade Plan���
    after adding card

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

  • openSUSE Leap 15.3:NonFree:

    zypper in -t patch openSUSE-2021-1489=1

OSVersionArchitecturePackageVersionFilename
openSUSE Leap NonFree15.3x86_64< - openSUSE Leap 15.3:NonFree (x86_64):- openSUSE Leap 15.3:NonFree (x86_64):.x86_64.rpm

9.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P